views:

521

answers:

3

Where can I get a free code signing certificate for signing my applications? Ascertia used to give them out for free but apparently they don't anymore. Mine just expired and I'm looking to get another one? Any ideas?

+1  A: 

OpenSSL - http://www.openssl.org/. Is this what you are looking for?

Tone
+2  A: 

It looks like you're looking for a code signing certificate to sign your ClickOnce deployed programs. Use makecert.exe. Since you'll be making an untrusted certificate anyways, put the validity date out 50 years and you won't have to worry about expiring certificates. Also, make sure you include the -pe switch so you can export it out of the certificate store (this creates the .pfx file you're looking for). Include the -r switch because you're self-signing it. So, your command should look something like this:

makecert -r -pe -n "CN=Your Company" -b 01/01/2009 -e 01/01/2050 -ss my

Then, go into Certificate Services:

  1. Run
  2. "mmc"
  3. Add/Remove Snap-in
  4. Double click "Certificates"
  5. OK, OK

Your new certificate should be sitting in the Personal folder. Right click it -> All Tasks -> Export. Make sure to export it WITH the private key. That should give you your .pfx file. Save that in a safe place (off your computer). You don't want to be resigning your applications all the time. There's a bug in VS2005 that is proliferated by resigning your apps.

If you're talking about obtaining a trusted certificate, I am not aware of any root CA's that give them out for free.

James Jones
Works sweet! And if you use "signtool.exe signwizard" you don't even need to do the mmc steps, thw wizard will pull in from the My cert store.
Ken H
+2  A: 

Take a look at this question and its answers as it references many CAs that will give free certificates. Though the question is specific to open source projects, I think that some of the CAs don't place this restriction on the certificates they issue.

Steve Guidi